26504 matches found
WordPress SupportCandy - Helpdesk & Customer Support Ticket System plugin <= 3.4.4 - Authenticated (Subscriber+) Insecure Direct Object Reference vulnerability
WordPress SupportCandy - Helpdesk & Customer Support Ticket System plugin = 3.4.4 - Authenticated Subscriber+ Insecure Direct Object Reference vulnerability discovered by Theklis - Sentrium Security Ltd in WordPress Plugin SupportCandy versions = 3.4.4...
CLEANSTART-2026-GJ12884 Within HostnameError
Multiple security vulnerabilities affect the kaniko-fips package. Within HostnameError. See references for individual vulnerability details...
CLEANSTART-2026-SH75345 Cancelling a query (e
Multiple security vulnerabilities affect the k8ssandra-operator-fips package. Cancelling a query e. See references for individual vulnerability details...
CLEANSTART-2026-YK82785 Within HostnameError
Multiple security vulnerabilities affect the kubernetes package. Within HostnameError. See references for individual vulnerability details...
OESA-2026-1247 tinyxml2 security update
TinyXML-2 is a simple, small, efficient, C++ XML parser that can be easily integrated into other programs. TinyXML-2 parses an XML document, and builds from that a Document Object Model DOM that can be read, modified, and saved. Security Fixes: TinyXML2 through 10.0.0 has a reachable assertion fo...
SUSE-SU-2026:20180-1 Security update for unbound
This update for unbound fixes the following issues: Update to 1.24.1: - CVE-2025-11411: Fixed possible domain hijacking attack bsc1252525...
WordPress BuddyBoss Platform plugin < 2.6.0 - Subscriber+ Comment on Private Post via IDOR vulnerability
Subscriber+ Comment on Private Post via IDOR vulnerability discovered by Faris Krivic in WordPress Plugin Buddyboss Platform versions 2.6.0...
SUSE CVE-2026-22994
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix reference count leak in bpfprogtestrunxdp syzbot is reporting unregisternetdevice: waiting for sit0 to become free. Usage count = 2 problem. A debug printk patch found that a refcount is obtained at xdpconvertmdtobuff fr...
The vulnerability of the `fs.statSync()` and `fs.readFileSync()` functions in the pnpm package manager’s script `store/cafs/src/addFilesFromDir.ts` allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the fs.statSync and fs.readFileSync functions in the pnpm package manager’s script store/cafs/src/addFilesFromDir.ts is related to an incorrect definition of references before accessing files. Exploiting this vulnerability could allow an attacker to gain unauthorized access t...
SUSE: Security Advisory (SUSE-SU-2026:20132-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2026-43851
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the gfs2 iomap inline data write path. The inline data buffer head dibh is released prematurely in the gfs2 iomap begin function via release metapath,...
CVE-2026-24845
malcontent discovers supply-chain compromises through. context, differential analysis, and YARA. Starting in version 0.10.0 and prior to version 1.20.3, malcontent could be made to expose Docker registry credentials if it scanned a specially crafted OCI image reference. malcontent uses...
MINI-P964-962P-CXCR
Bulletin has no description...
CVE-2026-1389
The Document Embedder – Embed PDFs, Word, Excel, and Other Files plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.4. This is due to the plugin not verifying that a user has permission to access the requested resource in the...
CVE-2026-24909
vlt before 1.0.0-rc.10 mishandles path sanitization for tar, leading to path traversal during extraction...
ECHO-003F-2632-599C This vulnerability is disputed by the openssh maintainers, and is considered expected and necessary behavior. https://security-tracker.debian.org/tracker/CVE-2008-3234 https://access.redhat.com/security/cve/cve-2008-3234
Bulletin has no description...
ECHO-DF10-54DF-BA97 This vulnerability is not applicable as Echo images do not ship with libraries enabling S/KEY or OPIE authentication. https://security-tracker.debian.org/tracker/CVE-2007-2768 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=112279
Bulletin has no description...
CGA-FCW9-97P6-2Q84
Bulletin has no description...